SQL Injection Vulnerability in Simple Mobile Comparison Website by Oretnom23
CVE-2022-26170

9.8CRITICAL

Key Information:

Vendor: Simple Mobile Comparison Website Project
Status: Simple Mobile Comparison Website
Vendor: CVE Published:; 2 March 2022

🔔 Create Simple Mobile Comparison Website Project Vulnerability Alert

What is CVE-2022-26170?

The Simple Mobile Comparison Website v1.0 has been identified to have a SQL injection vulnerability that can be exploited through the search parameter. This flaw could allow an attacker to manipulate SQL queries, potentially leading to unauthorized access to sensitive data within the database. Proper input validation and prepared statements are recommended to mitigate this risk. Website administrators should prioritize patching and securing their applications to prevent exploitation.

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/mai...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 2, 2022
Vulnerability Reserved
Feb 28, 2022

CVE-2022-26170 Data

JSON